Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.mft
File:                     PCXkJOPJhYipFBlXFR_RmLjiMBo.mft (raw, json)
Hash identifier:          UA/9VIsdB4dhleUJjJ07nDa2gL2+WYULdqHIGSlAsHo=
Subject key identifier:   C2:F7:D6:23:D7:05:BB:97:CE:37:CC:EF:25:3F:D9:45:03:BB:EB:AF
Authority key identifier: 3C:25:E4:24:E3:C9:85:88:A9:14:19:57:15:1F:D1:98:B8:E2:30:1A
Certificate issuer:       /CN=F369974AAF/serialNumber=3C25E424E3C98588A9141957151FD198B8E2301A
Certificate serial:       7F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PCXkJOPJhYipFBlXFR_RmLjiMBo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.mft
Manifest number:          7D
Signing time:             Thu 24 Sep 2026 05:39:08 +0000
Manifest this update:     Thu 24 Sep 2026 05:39:07 +0000
Manifest next update:     Sat 26 Sep 2026 05:39:07 +0000
Files and hashes:         1: PCXkJOPJhYipFBlXFR_RmLjiMBo.crl (hash: g1MVpdGj/o8VhBlEfvRxKYW6Rm4+Vr5QDSRDXEbUyIc=)
                          2: 91B9A1AE5B3911F1BC67CFA9CE1D38B0.roa (hash: NE0BNN+6YauOQh4d8YGr79gCcioMJe/c9Md1hyxaS7k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PCXkJOPJhYipFBlXFR_RmLjiMBo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369974AAF, serialNumber=3C25E424E3C98588A9141957151FD198B8E2301A
        Validity
            Not Before: Sep 24 05:39:07 2026 GMT
            Not After : Sep 26 05:39:07 2026 GMT
        Subject: CN=6ab4b77c-e75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a4:c9:49:b5:ff:74:d7:b4:45:15:ce:1c:df:
                    22:42:3b:bc:18:f3:f6:7f:33:0d:f7:f5:5e:17:3f:
                    90:42:22:1d:ce:d9:87:ed:02:28:e5:89:c4:4a:56:
                    bc:08:5f:ef:e9:05:05:77:59:20:82:fb:e4:0a:1e:
                    e6:76:6e:83:2e:b1:14:c1:5e:4b:81:98:9e:71:0a:
                    83:ce:ec:9d:2d:08:93:bb:c5:71:25:98:26:24:ef:
                    4e:8c:d1:a5:59:50:71:ad:b8:33:ff:17:93:fe:57:
                    e2:e5:5d:6f:32:f6:c0:f5:e6:3b:e8:8a:bd:db:7c:
                    8e:23:08:27:ad:06:07:98:7a:28:f6:96:59:28:2b:
                    39:f1:0f:76:ff:ec:ec:73:25:c9:22:97:42:15:65:
                    a6:a1:98:a5:67:3b:da:21:8e:76:13:cd:00:38:36:
                    cb:2d:a8:78:50:b6:45:5d:60:50:07:e8:61:5e:cb:
                    9f:11:e8:bd:ad:41:24:86:38:d7:a2:f4:80:0c:2d:
                    7f:8c:9f:a9:39:b3:e2:c6:b0:9d:5a:0b:92:65:15:
                    68:42:ba:d2:7c:e4:7c:de:31:ed:0b:f3:27:e8:e6:
                    f1:52:90:d2:97:4b:e7:42:35:5e:ec:13:7a:f4:69:
                    3f:23:e7:bf:e4:28:8a:e5:c9:f9:33:a1:eb:50:50:
                    11:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F7:D6:23:D7:05:BB:97:CE:37:CC:EF:25:3F:D9:45:03:BB:EB:AF
            X509v3 Authority Key Identifier:
                keyid:3C:25:E4:24:E3:C9:85:88:A9:14:19:57:15:1F:D1:98:B8:E2:30:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PCXkJOPJhYipFBlXFR_RmLjiMBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369974A/868528A05B2811F1A26309C6CE1D38B0/PCXkJOPJhYipFBlXFR_RmLjiMBo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:3d:1d:8c:e2:d9:ee:70:e4:83:35:c2:6f:23:ea:ae:87:b3:
         47:4c:77:ea:ff:6a:38:48:63:78:78:8a:84:50:90:49:69:59:
         01:ca:24:c4:da:ed:9a:f3:69:ec:76:49:87:c0:39:ef:16:10:
         73:ff:a0:32:3f:13:fe:37:24:d7:2e:6e:a6:17:58:84:50:f4:
         f2:0a:05:44:d5:2b:bc:8a:1c:fb:57:82:ec:df:09:4a:e2:8e:
         59:e3:2b:4d:e2:1a:a0:f9:22:2f:93:c4:48:ec:5c:e4:ae:fe:
         65:81:a0:9b:6b:47:4b:f2:ce:86:79:e4:1b:fb:e7:fe:dd:4a:
         8c:d5:37:2b:26:ce:e4:b8:0a:dc:b9:02:c1:8a:c3:a9:dd:32:
         a9:34:41:07:1c:97:51:00:f1:1e:eb:eb:74:63:bb:f1:78:b7:
         c6:21:1c:b9:dd:20:5b:17:d4:ed:0b:9f:d8:0c:16:ee:3a:26:
         88:d9:73:19:13:d7:f9:87:c8:19:a9:52:f9:30:ab:54:6b:6e:
         97:ab:3a:f7:2e:96:08:93:b2:99:7b:85:17:5a:fa:4b:cb:9e:
         d0:af:29:d1:36:4e:27:b4:25:c5:b2:c5:03:f6:7f:f4:65:4e:
         0d:fc:22:7e:7b:ae:4b:1e:4f:82:4c:5d:d1:07:31:24:ae:be:
         a1:93:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----